This Cookie & Online Tracking Notice explains storage and tracking on https://www.durandisseone.com. It is a pre-publication draft pending legal review and is not yet in force.
1. What this notice covers
“Cookies” includes cookies, local storage, session storage, pixels, scripts, and similar technologies. We use these categories: strictly necessary storage; analytics / performance; functional storage; and advertising / targeting.
Consent is obtained before any non-essential technology loads. No non-essential script, analytics library, autocapture, or non-essential storage is started or written before an affirmative choice. The default is denied.
2. Strictly necessary storage
Strictly necessary storage supports the Site and your privacy choices and is always on. It includes the consent record d-one-consent-v1 and the existing D-ONE appearance preference d-one-dashboard-appearance. These records do not enable analytics or advertising.
Interactive authenticated showcase state uses session storage where applicable and remains part of the existing product-preview functionality. It is not used as an analytics identifier.
3. Analytics / performance
PostHog analytics is enabled in production. It loads only when both conditions are true: a valid PUBLIC_POSTHOG_KEY is configured and the visitor has explicitly allowed analytics. PostHog is not initialised and does not capture pageviews, clicks, or autocapture before that choice.
When permitted, PostHog helps us understand page use and improve performance. Analytics information is retained for 14 months. Withdrawing analytics consent calls the analytics provider’s opt-out controls, stops session recording if available, removes the provider script, and clears matching analytics persistence.
4. Global Privacy Control
We honour Global Privacy Control as a valid opt-out signal. The Site checks navigator.globalPrivacyControl in the browser and, where the request is server-rendered, the Sec-GPC: 1 request header. If the signal is present, analytics remains off unless the visitor later makes an explicit analytics opt-in in the preference center. The preference center visibly reports when GPC is detected.
If the signal cannot be read reliably, the Site fails closed and treats non-essential technology as opted out.
5. Your choices
The first-visit banner offers Accept all, Reject all, and Manage preferences with equal prominence. The preference center shows Strictly necessary, Analytics / performance, Functional, and Advertising / targeting categories. Non-essential categories are off by default and are never pre-ticked. Advertising / targeting is off because Durandisse One does not currently use that technology.
Use the “Cookie preferences” control in the public footer to reopen the center. Your selection persists across reloads. You can change it at any time; withdrawing consent closes the analytics gate and clears its gated persistence.
6. Third parties, contact, and changes
PostHog is the current analytics provider, used only after consent. The contact form uses a hosted email-delivery endpoint to deliver an inquiry to the configured Durandisse One recipient; that delivery is part of the requested contact interaction, not advertising or analytics.
The privacy contact, legal entity, address, provider disclosures, and effective date remain [LEGAL AND CONTACT DETAILS — PENDING LEGAL REVIEW] and [EFFECTIVE DATE — PENDING LEGAL REVIEW]. We may update this notice when our technology or legal obligations change. This page remains a pre-publication draft and is not yet in force.